Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
89

Fedora Core 3: FEDORA-2005-517 Critical PHP Security Fix

This update includes the PEAR XML_RPC 1.3.1 package, which fixes a security issue in the XML_RPC server implementation.. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2005-517 2005-07-05 ---------------------------------------------------------------------Product : Fedora Core 3 Name : php Version : 4.3.11 =20 Release : 2.6 =20 Summary : The PHP HTML-embedded scripting language. (PHP: Hypertext Preprocessor) Description : PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated webpages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. The mod_php module enables the Apache Web server to understand and process the embedded PHP language in Web pages. ---------------------------------------------------------------------Update Information: This update includes the PEAR XML_RPC 1.3.1 package, which fixes a security issue in the XML_RPC server implementation. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2005-1921 to this issue. The bundled version of shtool is also updated, to fix some temporary file handling races. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2005-1751 to this issue. ---------------------------------------------------------------------* Tue Jul 5 2005 Joe Orton 4.3.11-2.6 - pear: update to XML_RPC 1.3.1 (CAN-2005-1921, #162045) - update bundled shtool to 2.0.2 (CAN-2005-1751, #158998) - require autoconf, automake for -devel package (#159283) ---------------------------------------------------------------------This update can be downloaded from: a174c30ad5e96498a5e93233ee6385ea SRPMS/php-4.3.11-2.6.src.rpm a2984b641de63888c6622e9d5e6c131e x86_64/php-4.3.11-2.6.x86_64.rpm 43fcc397d921a0830faf56b971ddd31f x86_64/php-devel-4.3.11-2.6.x86_64.rpm a98ee7857361a00bb7253af012bcf8ca x86_64/php-pear-4.3.11-2.6.x86_64.rpm af006624ac19d143821e8589ea1ab41b x86_64/php-imap-4.3.11-2.6.x86_64.rpm e911a6bc8509791fdb3beb6ec57f9a4f x86_64/php-ldap-4.3.11-2.6.x86_64.rpm 0667770fe1a20ab4377b0f270e86dd24 x86_64/php-mysql-4.3.11-2.6.x86_64.rpm f9d2a8cf407875991ca3d353bcb7f17c x86_64/php-pgsql-4.3.11-2.6.x86_64.rpm 2d47fd7f1ba7e2a3932917ee4bf9c39d x86_64/php-odbc-4.3.11-2.6.x86_64.rpm dff854303417c33939adf56b2ff52dd6 x86_64/php-snmp-4.3.11-2.6.x86_64.rpm 830d9e2d023bf789774fb610db5c10ea x86_64/php-domxml-4.3.11-2.6.x86_64.rpm 9c074857fe9a4db0b2cad3e3220a7fa0 x86_64/php-xmlrpc-4.3.11-2.6.x86_64.rpm 8cc21c37e3f46c3091c31d0111043a2f x86_64/php-mbstring-4.3.11-2.6.x86_64.rpm 387e8fbeb1e0ddaba3ed8c9f6c531509 x86_64/php-ncurses-4.3.11-2.6.x86_64.rpm 887ae796ffa6aa12bbc4e7ef227af209 x86_64/php-gd-4.3.11-2.6.x86_64.rpm 1957e6d2ae92be01f79b395736a6bd73 x86_64/debug/php-debuginfo-4.3.11-2.6.x86_64.rpm 093db5829c89aba8af79bcce88d83e2e i386/php-4.3.11-2.6.i386.rpm 9314db2476cbd4840286b0092d603621 i386/php-devel-4.3.11-2.6.i386.rpm 259afaa2af03ea7d879c6a448c3ad70a i386/php-pear-4.3.11-2.6.i386.rpm aaa0e93451abb3794624520ed7400ace i386/php-imap-4.3.11-2.6.i386.rpm 490d0f1c9b71176e238faa096793bdd4 i386/php-ldap-4.3.11-2.6.i386.rpm 6b773958ade696a8e9b18a3b519c443b i386/php-mysql-4.3.11-2.6.i386.rpm 259498bb42fc271c651d72a4871b9b31 i386/php-pgsql-4.3.11-2.6.i386.rpm ad1c1a842709494b098979c9f2aa33a7 i386/php-odbc-4.3.11-2.6.i386.rpm 5bdd86ed53246118645d599c07e7909c i386/php-snmp-4.3.11-2.6.i386.rpm af8af25e3e0319db1c9a325f85112b77 i386/php-domxml-4.3.11-2.6.i386.rpm bb551acb1b2421ce2d4ac6e7d2cc676b i386/php-xmlrpc-4.3.11-2.6.i386.rpm 4a7ecf8772101604df11e2276b7c9ae2 i386/php-mbstring-4.3.11-2.6.i386.rpm 81fa3c7e75d7e304f6d6a85ca3059630 i386/php-ncurses-4.3.11-2.6.i386.rpm c76642b88ae71ae50e805af6dfc2d6fe i386/php-gd-4.3.11-2.6.i386.rpm f3f076e25a64669d98d73965acd66181 i386/debug/php-debuginfo-4.3.11-2.6.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. =20 -----------------------------------------------------------------------OgqxwSJOaUobr8KG Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE-----Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFCyp5eR/aWnQ5EzwwRAsEZAJ9bfHTz8RVm8clEHtQIRSB7dl5g3gCfezDV GNylh/DbqSa7v5T4qCTvfn8=h1a/ -----END PGP SIGNATURE-------OgqxwSJOaUobr8KG-- --===============1728576472=Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline --fedora-announce-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Enhancements address vulnerabilities in XML_RPC and refine handling of temporary files. Crucial for users on Fedora Core 3.. Fedora Core 3, PHP Update, XML_RPC Security, Software Patch. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jul 05, 2005 Critical Fedora
98

Red Hat RHSA-2004:494-01 Critical: ImageMagick Heap Overflow Threat

Updated ImageMagick packages that fix various security vulnerabilities are now available.. --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated ImageMagick packages fix security vulnerabilities Advisory ID: RHSA-2004:494-01 Issue date: 2004-10-20 Updated on: 2004-10-20 Product: Red Hat Enterprise Linux CVE Names: CAN-2003-0455 CAN-2004-0827 --------------------------------------------------------------------- 1. Summary: Updated ImageMagick packages that fix various security vulnerabilities are now available. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64 Red Hat Linux Advanced Workstation 2.1 - ia64 Red Hat Enterprise Linux ES version 2.1 - i386 Red Hat Enterprise Linux WS version 2.1 - i386 3. Problem description: ImageMagick(TM) is an image display and manipulation tool for the X Window System. A heap overflow flaw was discovered in the ImageMagick image handler. An attacker could create a carefully crafted BMP file in such a way that it would cause ImageMagick to execute arbitrary code when processing the image. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0827 to this issue. A temporary file handling bug has been found in ImageMagick's libmagick library. A local user could overwrite or create files as a different user if a program was linked with the vulnerable library. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2003-0455 to this issue. Users of ImageMagick should upgrade to these updated packages, which contain a backported patch, and is not vulnerable to this issue. 4. Solution: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use thefollowing command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/ 5. Bug IDs fixed (http://bugzilla.redhat.com/ for more info): 98827 - CAN-2003-0455 ImageMagick temporary file handling vulnerability 130807 - CAN-2004-0827 heap overflow in BMP decoder 6. RPMs required: Red Hat Enterprise Linux AS (Advanced Server) version 2.1: SRPMS: 22738cf864df785a841772511e92e689 ImageMagick-5.3.8-5.src.rpm i386: 6f2d75c18a23e1dfd8436612760cea77 ImageMagick-5.3.8-5.i386.rpm 6ab5cd1e16ce974097ed70fe509b2d54 ImageMagick-c++-5.3.8-5.i386.rpm f8ecc0f1253736bd99b48d15447f61dc ImageMagick-c++-devel-5.3.8-5.i386.rpm 14cb59447f203c6d2141636c71ce8d58 ImageMagick-devel-5.3.8-5.i386.rpm c504ef763f766cf4c90cb8caad764ebb ImageMagick-perl-5.3.8-5.i386.rpm ia64: 13a0333046d8337643de2b338aa157b9 ImageMagick-5.3.8-5.ia64.rpm 163e1753c113703c2b279ab2b6150c9f ImageMagick-c++-5.3.8-5.ia64.rpm 4f16d62bf35adb7512da4fb1cbc93df7 ImageMagick-c++-devel-5.3.8-5.ia64.rpm 641626cf00da91e4cf321e5b5bde5ff8 ImageMagick-devel-5.3.8-5.ia64.rpm 5ae53b3226e04ca6bb3f4906faafa998 ImageMagick-perl-5.3.8-5.ia64.rpm Red Hat Linux Advanced Workstation 2.1: SRPMS: 22738cf864df785a841772511e92e689 ImageMagick-5.3.8-5.src.rpm ia64: 13a0333046d8337643de2b338aa157b9 ImageMagick-5.3.8-5.ia64.rpm 163e1753c113703c2b279ab2b6150c9f ImageMagick-c++-5.3.8-5.ia64.rpm 4f16d62bf35adb7512da4fb1cbc93df7 ImageMagick-c++-devel-5.3.8-5.ia64.rpm 641626cf00da91e4cf321e5b5bde5ff8 ImageMagick-devel-5.3.8-5.ia64.rpm 5ae53b3226e04ca6bb3f4906faafa998 ImageMagick-perl-5.3.8-5.ia64.rpm Red Hat Enterprise Linux ES version 2.1: SRPMS: 22738cf864df785a841772511e92e689 ImageMagick-5.3.8-5.src.rpm i386: 6f2d75c18a23e1dfd8436612760cea77 ImageMagick-5.3.8-5.i386.rpm 6ab5cd1e16ce974097ed70fe509b2d54 ImageMagick-c++-5.3.8-5.i386.rpm f8ecc0f1253736bd99b48d15447f61dc ImageMagick-c++-devel-5.3.8-5.i386.rpm 14cb59447f203c6d2141636c71ce8d58 ImageMagick-devel-5.3.8-5.i386.rpm c504ef763f766cf4c90cb8caad764ebb ImageMagick-perl-5.3.8-5.i386.rpm Red Hat Enterprise Linux WS version 2.1: SRPMS: 22738cf864df785a841772511e92e689 ImageMagick-5.3.8-5.src.rpm i386: 6f2d75c18a23e1dfd8436612760cea77 ImageMagick-5.3.8-5.i386.rpm 6ab5cd1e16ce974097ed70fe509b2d54 ImageMagick-c++-5.3.8-5.i386.rpm f8ecc0f1253736bd99b48d15447f61dc ImageMagick-c++-devel-5.3.8-5.i386.rpm 14cb59447f203c6d2141636c71ce8d58 ImageMagick-devel-5.3.8-5.i386.rpm c504ef763f766cf4c90cb8caad764ebb ImageMagick-perl-5.3.8-5.i386.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from 7. References: CVE -CVE-2003-0455 CVE -CVE-2004-0827 8. Contact: The Red Hat security contact is . More contact details at Copyright 2004 Red Hat, Inc. . Recent updates to ImageMagick have resolved security vulnerabilities in Red Hat offerings. Update now for improved protection and feature upgrades.. ImageMagick Security, Red Hat Updates, Package Upgrades, Security Fixes, Image Manipulation. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Oct 20, 2004 Critical Red Hat
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here